Update apt_gamaredon.txt
Update apt_gamaredon.txt

1) Figure 5.
2) ```Most likely, the attackers rented Virtual Private Server (VPS) as their attack base. Their URL for VBS (shown below) likely includes the data when they conducted the attack.

hxxp://{FQDN}/{computer name}_{hexadecimal volume serial number}/help_{day}_{month}[.]php
```
stamparm/maltrail,stamparm/maltrail,stamparm/maltrail,stamparm/maltrail